Test ID:	1.3.6.1.4.1.25623.1.0.103953
Category:	JunOS Local Security Checks
Title:	Juniper Networks Junos OS TCP Packet Handling Denial of Service Vulnerability
Summary:	A vulnerability in the Flow Daemon can cause a crash when;handling certain TCP packets.
Description:	Summary: A vulnerability in the Flow Daemon can cause a crash when handling certain TCP packets. Vulnerability Insight: On SRX Series services gateways, when plugins that use TCP proxy are configured (e.g. ALGs, UTM), a certain sequence of valid TCP packets may cause the flow daemon (flowd) to crash. Vulnerability Impact: A remote attacker can cause a denial of service. Affected Software/OS: Platforms running Junos OS versions 10.4, 11.4, 12.1, 12.1X44, or 12.1X45. Solution: New builds of Junos OS software are available from Juniper. As a workaround disable ALGs and UTM features if they are not required. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6015 http://osvdb.org/98368 http://www.securitytracker.com/id/1029177 http://secunia.com/advisories/55218
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.